CVE-2023-3559

CVE-2023-3559 affects GZ Scripts PHP GZ Appointment Scheduling Script 1.8. The vulnerability is in the /load.php endpoint, where manipulating parameters first_name, second_name, phone, address_1, or country enables cross-site scripting. Attacks can be launched remotely. Public references (VDB-233...

GZ Appointment Scheduling 1.8 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...